Responsibilities:

• Manage the Security Operation Centre (SOC) to ensure Continuous monitoring and detection.
• Manage and/or direct team members to conduct Cyber Security Incidents and Investigation
• Detect, Triage, Analyse, Response and Recover
  - Mentor, train and provide oversight for team members to conduct Investigation and Digital forensic
  - Coordinate with External entities (eg Government, CERTs etc)
  - Drive Remedial Actions by working with various stakeholders
• Manage the Insider Threat Program
• Maintain current knowledge of known and emerging threat actor tactics, techniques, and procedures from various intelligence sources
• Plan and execute cyber security tabletop exercise
• Provide oversight on the operational Support for Security Solutions (eg Privilege Access Management, SIEM, IDS/IPS, Advance threat detection etc and other security solutions)
• Plan and review the enhancement of system performance and direct the Computer Security Incident Response team in the development of new use cases to improve our Cyber threat detection capabilities.
• Provide oversight on the conduct of root cause analysis during system outage and troubleshoot within limited time constraints to ensure end user/ projects operations.
• Identify control gaps or weaknesses in current processes and recommend measures, tools or software application that will enhance the team capabilities and overall security posture of NTU.
• Lead and drive related Cyber defence initiatives to improve NTU cyber security posture.

Requirements:

• Degree in Computer Science, Computer Engineering, or related discipline
• CISSP, CISA, CISM, GIAC relevant IT security certification
• At least 10 years of IT related working experience with at least 3 years in Security Incident Response management.
• Prior experience in leading Cyber Defense Operation or SOC.
• Understanding and working experience in Cyber Security Incident detection and response practices and/or processes. e.g. NIST Incident Handling Guidelines, Cyber Kill Chain, MITRE ATT&CK Framework etc.
• Experience with Cyber Security solution such as Security Information & Event Management (SIEM), Endpoint Detection & Response, Threat Intelligence solutions, Privileged Access management or other enterprise security solutions.
• Experience in implementing security audits, controls, and mitigating measures on enterprise security solutions.

Hiring Institution: NTU